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(54) Resource retrieval over a data netwoilc 

(57) A method of downloacfing resources to a client 
(1) from a content server (3) over a data networlc A 
resource request message is sent from the client (1) 
and is intercepted at a proxy (2) located in the data net- 
work between the client (1) and the content server (3). 
A header request is sent from the proxy (2) to the con- 
tent server (3). requesting the content sender (3) to 
trdrismit a header, associated with the requested 
resource, to the proxy (2). The header Is received at the 
proxy (2) which determines whetha- or not the header 
contains billing and/or access restrictions, in the event 
that the header does contain billing and/or access 
restrictions, the cGenTs right to receive the requested 
resource is authenticated and, providing the cOent is 
aiihenlicateci the resource request message is deBv- 
ered from the proxy (2) to the content server (3) and 
subsequently the resource is downloaded from the con- 
X&A senrer (8) to the client (1). 
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Description 

(0001 ] The present invention relates to a mtihod and 
apparatus for retrieving resources from a content server 
over a data networtc and in partioular, ^ough not neces- s 
sarily, to a method and a^nratus for enhancing Wbftd 
Wide Web services. 

[0002] The Internet is a glok>al open conununicatbns 
networit connecting a great number of (oca) area net* 
works, such as networks of various conrpanies, univer- io 
sities and other organizations. These networks may be 
used by a large number of independent wori<stations 
and computer devices. An individial client may have a 
direct connection to these local area networks or may 
be connected to them through a PSTN (PubGc Switched is 
Telephone NetwortO or an ISDN (Inte^ated Digital 
Services networl^ using a modem or sinular device. 
[0003] The two most often used communicatkm proto- 
cols for the Internet are TCP and IP fTransport Control 
Protocol and Internet Protocol respectively). In most 20 
cases the service provkler provides the various serv- 
ices by utilizing so called WWW (Worki Wide Web] and 
HTTP (HyperText Transfer Protocol) protocols to pro- 
vkJe a grapfucal Internet interface for the client tenminal 
which is typically a data processing device such as a 25 
microoQmputer. The WWW contains, e.g. HTML docu- 
ments (HypwText Markup Language) i.e. 'hyperdocu- 
ments", one such document forming one entity which 
can contain text, pictures, even moving pictures, sound, 
links to other documents and even links to other serv- so 
ices. The skilled person is aware that "services'' refers in 
this connection to various kinds of features, products, 
sendees such as electronic mail, electronic phone booK 
entertainment, assistance and advisory sendees etc., 
advertisement games, vkieos and the like which are 95 
accessible through various communications networks. 
[0004] It is an object of the preset invention to 
enhance the operation of a data networic content sen^ 
by etBbling it to commurscate transparently with an 
external billing and authentuation sender or sendee. e.g. «? 
an Internet Service Broker, to offer valu&added logistic 
services. . 

[0005] Accorcfing to a first aspect of the present inven- 
tion there is provided a method of downloading 
resources to a client from a content server over a data 4s 
networic, the method comprising: 

sencfing a resource request message from the cli- 
ent: 

intercepting the sent resource request message at so 
a proxy located in the data network between the cli- 
ent and the content saver; 
sending a header request from the proxy to the con- 
tent server requesting the content server to transmit 
a header, associated with the requested resource, ss 
to the proxy; 

receiving the header at the proxy and determining 
whether or not the header contains bifling and/or 



access restrictions: 

in the event that the header does contain billing 
and/or access restrictions, authenticating the cli- 
ent's right to receive the requested resource; and 
provkiing the client is authenticated, delivering me 
resource request message from the proxy to the 
content server and subsequently downloading the 
resource from the content server to the dienL 

[0006] Preferably, sakJ step of authenticating the cli- 
ent's right to receive the requested resource comprises 
oonducting an authenticatian dialogue with an Internet 
Sendee Broker (ISB). The iSB is a software server plat- 
form which centralizes the logistic services on behalf of 
other content services. These logistic services include, 
without limitation, client identification and authentica- 
tion, access control to the network resouces, inified 
biDing interiace and cflent klentification delivery for serv- 
ice customization. The present invention may provide a 
method for implementing the interface for ttiese logistic 
services for standard web server witti standard HTML, 
such that there is no need to make ariy pn^rielary mod- 
ification. 

(D0071 The authentication st^ may additiondly com- 
prise a dialogue between the ISB and the client folkiw- 
Ing the setting up of the dialogue between the proxy and 
the ISB. 

[0008] The present invention may be combined with 
the Internet Service Broker concept which is described 
in PCT/FI97/D042a 

[0009] Preferably, the proxy mediates and stores or 
caches data to minimize loading time of commonly 
requested resources. When a certain hypertext docu- 
ment is requested several times from one or more cG- 
ents. tiie subsequent request(s) may be met by giving 
the already fetched document instead of requesting it 
again firom the original sourca This generally requires 
confirmation that the original document has not 
changed between successive requests. 
[001 0] The proxy may be a program running on a sep- 
arate corrputer device placed In frbnT of the computer 
devk:e oh which the content server is ninning. Alterna- 
tively, the proxy is a program running on ttie same com- 
puter as the content server. The proxy monitors tiie data 
traffic and provides the required togistic sennce when a 
certain HTTP message is detected. 
[001 1] According to a second aspect of the present 
invention there is provWed a proxy for controlling billing 
and access In a data network, the proxy comprising; 

m^uns for intercepting a resouroe request message 
sent from a cGent and intended for a content sender; 
means for sending a header request to tiie content 
server requesting tiie content server to transmit a 
header, associated witii the requested resource^ to 
tiie proxy: 

means for receiving tiie transnrutted header and for 
detennining whetiier or not tiie header contains bill- 
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ing and/or access rasbictions; 

means for authenticating the cOenfs right to receive 

the requested resource In the ef&ti that the header 

does contain bllRng andADT access restrictions: arvl 

means tor deOvering the resource request message 

to the content server in the event that the client is 

authenticated. 

[0012] According to a third aspect of the present 
invention there is pfo>Aded a computer memory 
encoded with executable Instrudians representing a 
corrputer program for causng a computer system con- 
nected to a data network to operate as a proxy the 
proxy operating to: 

intercept a resource request message sent from a 

cUent and intended for a content server; 

send a header request to the content server 

requesting the content server to transmit a header. 

associated with the requested resource, to the 

proxy; 

recove the transmitted header and tor determining 
%vhelher or not the header contains bQGng and/or 
access restrictions; 

authenticate the dienft right to receive the 
requested resource in the event that the header 
. does contain txlling and/or access restrictions; and 
: deliver the resource request message to the con- 
tent server In the event that the client is authenti- 
cated. 

[0013] For a better understanding of the present, 
inviention and In order to show how the same may be 
canried into effect reference will now be made, by way of 
exanplOi to the accompanying drawmgs, in which: 

Figure 1 is a schematic representation of the archi- 
tecture of an embodiment of the present invention; 
Figure 2 is a flow chart according to one enixxii- 
ment of the present invention; arxi 
Figure 3 is a message semantic diagram according 
I to one emk}od!ment of the present Inventioa 

[OdlA] Figure 1 is a schematic presentation of the 
architecture of an embodiment of the present invention. 
A User or client 1 is the end user using a Worid Wide 
Browser which supports identification items which 
a WWW Server can give to the browser and which the 
browser stores and gives back only to the server it orig- 
ins^Ily received them from. These infdrmation items, e.g. 
copWes. enable the connection of several oonnection- 
leds requests into a client session. 
[001 5] Proxy 2 is a software and/or hardware compo- 
neiit that monitors the data traffic and takes care of the 
access control and bilfing using ttie Internet Service 
Broker (ISB) functionality WWW Server 3 is a standard 

3d program which delivers an HTML p£^e. arxd pos- 
e ImageSp sound and other digital data linked into the 



page. \jpor\ a dienf s request The WWW Server 3 sup- 
ports cGent defined headers by. for example, .htaccess 
access control mechanism, custom headers or cgp-bin 
program& Most current WWW servers, for example 

5 APACHE or those provided by NETSCAPE or 
MICfK)SOFT'>'. have tfus functkmality 
[0016] WWW Data Store 4 is afie system, database 
or the Gke. where the cfient accessible data is stored, 
whilst ISB 5 is tiie Internet Sendee Broker which defines 

10 unified interiiaces for client kienfification and authentka- 
tton. and for billing. Proxy Oata Store 6 pravUes a cache 
in which tiie proxy 2 stores frequently requested docu- 
ments. 

[0017] Before describing the operation of a data 
IS retrieving system used by the networic of Rgure 1, it is 
useful to describe the nature and role of the so-called 
'Header which is associated with request reply mes- 
sages sent over tfie tntemet. The Header is a part of the 
message packet which contains control data related to 
20 the packet For the purpose of the present example, 
these headers are part of the HTTP protocol (or HTTPS 
wtuch is similar to HTTP but inctudes means for some 
security functtonalit^. TTnis, these headers have the fol- 
towing torm: 

29 

Header-f iekJ-name: value of the f ieto 

in whtoh the "Header-f leU-name* specifies the name of 
the header field and the Value of the field' is a charac- 

30 ter sting, starting after the field separator and endoig 
with the next line feed. This header structure makes it 
relatively easy to add more functionality to the protocol 
by adding more fietos, as long as the nneanlng of the 
existing f ieUs is maintained. 

ss [DOiq An example of such a fiekl is 

Content-4ength:S345 

where fleki name defines that Ms fieki contains infbr- 
40 mation about the amount of data in tfie message 
(excluding the header information) arvi ttie number in 
the vatoe part of the fleki Is interpreted as the data 
aiTXMjnt in fciytes as Implteitty defined t)y the meaning of 
fieU. The present method uses a packet tiiat is built by 
4S toOowing tfie same design principles as tiie protocol 
which it relies upon. However, wftilst the usual use of the 
protocol headers is point*tChpoint connections (i.a con- 
trolling the trafftofrom the starting point to the end point) 
or between two hops (i*e. two nodes directiy connected 
50 logetiier and interacting wHh each other), the use of the 
header f ietos in this method is to allow Interceptwn at a 
node (the "prox/O which is tietween the starting point 
and tiie end point 

[001 9] The header is used to inform tiie intermediate 
55 node about billing information associated with a 
resource which can be purchased through a public oorh 
nection networic. &g. tfie Internet and which is intended 
to be intercepted by the intermediate node and to be 
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Figure 1 
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